CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 10 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.
-
The Hacker News
Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens
Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's w ...
-
cert.pl
Vulnerability in KGS Software tia Viewer software
Vulnerability in KGS Software tia Viewer software CVE ID CVE-2026-105987 Publication date 27 October 2026 Vendor KGS Software Product tia Viewer Vulnerable versions All before 1.2.8 Vulnerability type ...
-
The Hacker News
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, softw ...
-
cert.pl
Vulnerabilities in twofactor_gauthenticator plugin for Roundcube
Vulnerabilities in twofactor_gauthenticator plugin for Roundcube CVE ID CVE-2026-107145 Publication date 27 October 2026 Vendor alexandregz Product twofactor_gauthenticator Vulnerable versions All bef ...
-
The Hacker News
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured by Dahua. "Cases of compromising IP camer ...
-
The Hacker News
CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday confirmed active exploitation of the recently patched PHP2Shell flaws by adding them to its Known Exploited Vulnerabilities ( ...
-
The Hacker News
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to Dutch e-commerce security company Sansec, ...
-
The Hacker News
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt m ...
-
TheCyberThrone
Microsoft Releases Out-of-Band .NET Security Updates: Four Vulnerabilities Addressed
Microsoft released out-of-band security updates for .NET on October 25, 2026, outside its regular monthly servicing schedule.The release addresses a buffer overflow vulnerability in Brotli decompressi ...
-
The Hacker News
⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More
This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere. Hackers are scanning for targets, som ...